$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6620a23e-bb82-37be-9f36-cb80975e96ef.roa File: 6620a23e-bb82-37be-9f36-cb80975e96ef.roa (raw, json) Hash identifier: +FlhfaNi20qwKlYPRUAFrxBw+EdZQPwYeRxXoPD/poA= Subject key identifier: AD:91:71:36:FF:88:86:90:8B:A5:30:D8:88:8C:11:12:F0:7E:16:8C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849B2AF6496BEECAC4413B79600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6620a23e-bb82-37be-9f36-cb80975e96ef.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 53356 IP address blocks: 172.94.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:64:96:be:ec:ac:44:13:b7:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=2b87ad67-fc25-4881-9ac4-ccfa0ab8d020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a1:f4:aa:38:39:18:7c:00:ec:fb:a0:93:66: 94:82:15:e6:44:18:b5:a9:42:54:25:72:b8:be:f4: da:74:2f:9c:b5:ef:08:e4:a4:85:03:18:32:f7:9a: 4d:ad:1c:22:6c:e0:3b:3a:0e:00:ae:79:40:f7:e9: 74:d6:fb:2e:75:51:09:28:3c:46:d6:e8:fd:5f:29: 9a:22:5d:0a:3f:f3:3b:e3:f8:62:6b:e3:08:a7:8a: f6:f1:6b:e3:35:8f:27:3d:1f:63:0a:ce:1e:24:1a: dc:77:6a:fc:a7:dd:0b:6d:be:58:65:d9:59:77:e0: 63:96:3b:c4:92:22:86:3a:af:da:63:8b:27:91:96: 78:cb:28:66:e3:dc:37:65:e3:94:a1:2b:84:81:32: f1:52:75:36:bd:f9:52:74:ff:c0:80:36:81:3d:68: a8:01:6c:65:4d:f0:fb:33:66:d3:38:98:53:86:cc: 46:29:d7:be:c7:36:af:ac:d7:5d:6c:4e:fd:8f:b9: 1b:90:3a:21:ae:3c:86:ca:0f:38:b7:2a:72:27:f6: e8:2c:5a:c2:ad:c2:3e:2c:15:3c:39:99:73:7a:b2: da:75:2b:b3:04:f2:24:2b:73:a8:f0:85:35:3c:d8: 57:66:10:e1:01:86:3f:55:d9:a5:ca:20:9e:ec:7d: ef:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:91:71:36:FF:88:86:90:8B:A5:30:D8:88:8C:11:12:F0:7E:16:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6620a23e-bb82-37be-9f36-cb80975e96ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:89:bc:7a:25:73:5d:66:7f:92:89:34:78:03:f8:6d:b4:cf: 22:d9:0d:07:41:89:30:79:67:95:b4:87:f0:93:92:58:94:fd: 68:4a:e8:28:aa:60:dc:23:af:7e:e1:ca:d7:2e:54:7f:7f:66: a9:ae:01:ba:45:89:75:64:3d:30:be:03:fb:0e:a2:5d:1d:99: 7e:10:f7:0c:62:97:6b:27:ef:88:ec:a7:f1:61:0b:86:41:9a: 23:ea:7e:bb:93:c3:30:73:64:60:82:f0:ed:50:5c:70:65:5a: b3:3a:d0:4b:63:80:62:ae:51:4e:88:0e:54:86:6e:ee:53:58: 2d:c1:27:86:11:3c:c8:30:44:22:70:eb:b6:10:00:36:e0:33: 44:04:2b:6a:2a:97:96:e5:4f:bc:cf:65:c1:fb:31:ad:78:16: 90:6e:72:9a:a2:a7:3d:c5:4c:b9:5e:db:58:ab:51:5d:de:96: 34:ad:76:a4:69:c6:d5:35:d0:9c:91:5d:f9:d0:20:3e:1a:b5: 27:8b:08:9a:d4:09:ed:3d:5d:ad:33:07:3b:1d:7f:3e:d7:20: 8a:da:c7:3b:4e:45:aa:cb:f6:7d:6f:bf:a4:db:cf:2f:95:35: 34:28:c7:49:59:ac:3e:e7:0e:68:25:f9:a9:ca:13:db:5d:58: bd:c9:bc:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr2SWvuysRBO3lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk MmI4N2FkNjctZmMyNS00ODgxLTlhYzQtY2NmYTBhYjhkMDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6H0qjg5GHwA7Pugk2aUghXmRBi1qUJUJXK4 vvTadC+cte8I5KSFAxgy95pNrRwibOA7Og4ArnlA9+l01vsudVEJKDxG1uj9Xyma Il0KP/M74/hia+MIp4r28WvjNY8nPR9jCs4eJBrcd2r8p90Lbb5YZdlZd+BjljvE kiKGOq/aY4snkZZ4yyhm49w3ZeOUoSuEgTLxUnU2vflSdP/AgDaBPWioAWxlTfD7 M2bTOJhThsxGKde+xzavrNddbE79j7kbkDohrjyGyg84typyJ/boLFrCrcI+LBU8 OZlzerLadSuzBPIkK3Oo8IU1PNhXZhDhAYY/VdmlyiCe7H3vqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2RcTb/iIaQi6Uw2IiMERLwfhaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjYyMGEyM2UtYmI4Mi0z N2JlLTlmMzYtY2I4MDk3NWU5NmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISJvHolc11mf5KJNHgD+G20zyLZDQdBiTB5Z5W0h/CTkliU/WhK6Ciq YNwjr37hytcuVH9/ZqmuAbpFiXVkPTC+A/sOol0dmX4Q9wxil2sn74jsp/FhC4ZB miPqfruTwzBzZGCC8O1QXHBlWrM60EtjgGKuUU6IDlSGbu5TWC3BJ4YRPMgwRCJw 67YQADbgM0QEK2oql5blT7zPZcH7Ma14FpBucpqipz3FTLle21irUV3eljStdqRp xtU10JyRXfnQID4atSeLCJrUCe09Xa0zBzsdfz7XIIraxztORarL9n1vv6Tbzy+V NTQox0lZrD7nDmgl+anKE9tdWL3JvGw= -----END CERTIFICATE-----Generated at Sun May 11 02:11:31 2025 by rpki-client